Command Injection Vulnerability in BeyondTrust Privileged Remote Access and Remote Support

CVE-2023-4310

What is CVE-2023-4310?

BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 are susceptible to a command injection vulnerability. This issue arises when a malicious HTTP request is sent, potentially enabling an unauthenticated attacker to execute commands on the underlying operating system in the context of the affected user's privileges. The vulnerability has been addressed in version 23.2.3.

References